From c8cd002a3be424531ef9ceadf00742f98820733b Mon Sep 17 00:00:00 2001 From: Alexandre Dulaunoy Date: Fri, 24 Sep 2021 15:33:53 +0200 Subject: [PATCH] chg: [hashlookup] add KnownMalicious field in hashlookup record --- objects/hashlookup/definition.json | 8 +++++++- 1 file changed, 7 insertions(+), 1 deletion(-) diff --git a/objects/hashlookup/definition.json b/objects/hashlookup/definition.json index 4ccc7d7..cfe411b 100644 --- a/objects/hashlookup/definition.json +++ b/objects/hashlookup/definition.json @@ -12,6 +12,12 @@ "misp-attribute": "size-in-bytes", "ui-priority": 0 }, + "KnownMalicious": { + "description": "Source of the hashlookup record if it's a known malicious file", + "disable_correlation": true, + "misp-attribute": "text", + "ui-priority": 0 + }, "MD5": { "description": "MD5 hash (128 bits) in hex representation", "misp-attribute": "md5", @@ -94,5 +100,5 @@ "SSDEEP" ], "uuid": "18671816-2524-452e-b031-5fc0fe2ab774", - "version": 2 + "version": 3 } \ No newline at end of file